KubeZero/charts/kubezero-ci
2022-12-15 21:51:31 +00:00
..
templates fix: Fix CNI upgrade, new ECK CRDs, new logging, Istio fixes 2022-04-29 20:22:20 +02:00
Chart.yaml fix: shorten kubezero-lib names, tweaks 2022-12-15 21:51:31 +00:00
dashboards.yaml feat: add preconfigured Jenkins to CI module 2022-01-20 00:04:35 +01:00
README.md fix: shorten kubezero-lib names, tweaks 2022-12-15 21:51:31 +00:00
README.md.gotmpl feat: various fixes and version bumps for >= 1.22.8 2022-04-08 17:11:34 +02:00
update.sh feat: Istio Ingress migration to new gateway charts 2022-04-21 13:57:34 +02:00
values.yaml feat: v1.24.9, istio 1.16 2022-12-13 12:13:33 +00:00

kubezero-ci

Version: 0.5.20 Type: application

KubeZero umbrella chart for all things CI

Homepage: https://kubezero.com

Maintainers

Name Email Url
Stefan Reimer stefan@zero-downtime.net

Requirements

Kubernetes: >= 1.20.0

Repository Name Version
https://aquasecurity.github.io/helm-charts/ trivy 0.4.17
https://cdn.zero-downtime.net/charts/ kubezero-lib >= 0.1.6
https://charts.jenkins.io jenkins 4.2.13
https://dl.gitea.io/charts/ gitea 6.0.3
https://gocd.github.io/helm-chart gocd 1.40.8

Jenkins

  • default build retention 10 builds, 32days
  • memory request 1.25GB
  • dark theme
  • trivy scanner incl. HTML reporting and publisher

goCD

Gitea

OpenSSH 8.8 RSA disabled

Resources

JVM tuning in containers

Values

Key Type Default Description
gitea.enabled bool false
gitea.gitea.admin.existingSecret string "gitea-admin-secret"
gitea.gitea.config.cache.ADAPTER string "memory"
gitea.gitea.config.database.DB_TYPE string "sqlite3"
gitea.gitea.demo bool false
gitea.gitea.metrics.enabled bool false
gitea.gitea.metrics.serviceMonitor.enabled bool false
gitea.image.rootless bool true
gitea.image.tag string "1.17.3"
gitea.istio.enabled bool false
gitea.istio.gateway string "istio-ingress/private-ingressgateway"
gitea.istio.url string "git.example.com"
gitea.mariadb.enabled bool false
gitea.memcached.enabled bool false
gitea.mysql.enabled bool false
gitea.persistence.enabled bool true
gitea.persistence.size string "4Gi"
gitea.postgresql.enabled bool false
gitea.securityContext.allowPrivilegeEscalation bool false
gitea.securityContext.capabilities.add[0] string "SYS_CHROOT"
gitea.securityContext.capabilities.drop[0] string "ALL"
gocd.enabled bool false
gocd.istio.enabled bool false
gocd.istio.gateway string "istio-ingress/private-ingressgateway"
gocd.istio.url string ""
gocd.server.ingress.enabled bool false
gocd.server.service.type string "ClusterIP"
jenkins.agent.annotations."container.apparmor.security.beta.kubernetes.io/jnlp" string "unconfined"
jenkins.agent.containerCap int 2
jenkins.agent.customJenkinsLabels[0] string "podman-aws-trivy"
jenkins.agent.idleMinutes int 10
jenkins.agent.image string "public.ecr.aws/zero-downtime/jenkins-podman"
jenkins.agent.podName string "podman-aws"
jenkins.agent.podRetention string "Default"
jenkins.agent.resources.limits.cpu string "4"
jenkins.agent.resources.limits.memory string "6144Mi"
jenkins.agent.resources.requests.cpu string "512m"
jenkins.agent.resources.requests.memory string "1024Mi"
jenkins.agent.showRawYaml bool false
jenkins.agent.tag string "v0.4.1"
jenkins.agent.yamlMergeStrategy string "merge"
jenkins.agent.yamlTemplate string "apiVersion: v1\nkind: Pod\nspec:\n securityContext:\n fsGroup: 1000\n serviceAccountName: jenkins-podman-aws\n containers:\n - name: jnlp\n resources:\n limits:\n github.com/fuse: 1\n volumeMounts:\n - name: aws-token\n mountPath: \"/var/run/secrets/sts.amazonaws.com/serviceaccount/\"\n readOnly: true\n - name: host-registries-conf\n mountPath: \"/home/jenkins/.config/containers/registries.conf\"\n readOnly: true\n volumes:\n - name: aws-token\n projected:\n sources:\n - serviceAccountToken:\n path: token\n expirationSeconds: 86400\n audience: \"sts.amazonaws.com\"\n - name: host-registries-conf\n hostPath:\n path: /etc/containers/registries.conf\n type: File"
jenkins.controller.JCasC.configScripts.zdt-settings string "jenkins:\n noUsageStatistics: true\n disabledAdministrativeMonitors:\n - \"jenkins.security.ResourceDomainRecommendation\"\nunclassified:\n buildDiscarders:\n configuredBuildDiscarders:\n - \"jobBuildDiscarder\"\n - defaultBuildDiscarder:\n discarder:\n logRotator:\n artifactDaysToKeepStr: \"32\"\n artifactNumToKeepStr: \"10\"\n daysToKeepStr: \"100\"\n numToKeepStr: \"10\"\n"
jenkins.controller.disableRememberMe bool true
jenkins.controller.enableRawHtmlMarkupFormatter bool true
jenkins.controller.initContainerResources.limits.cpu string "1000m"
jenkins.controller.initContainerResources.limits.memory string "1024Mi"
jenkins.controller.initContainerResources.requests.cpu string "50m"
jenkins.controller.initContainerResources.requests.memory string "256Mi"
jenkins.controller.installPlugins[0] string "kubernetes:3734.v562b_b_a_627ea_c"
jenkins.controller.installPlugins[1] string "workflow-aggregator:581.v0c46fa_697ffd"
jenkins.controller.installPlugins[2] string "git:4.14.2"
jenkins.controller.installPlugins[3] string "configuration-as-code:1569.vb_72405b_80249"
jenkins.controller.installPlugins[4] string "antisamy-markup-formatter:155.v795fb_8702324"
jenkins.controller.installPlugins[5] string "prometheus:2.0.11"
jenkins.controller.installPlugins[6] string "htmlpublisher:1.31"
jenkins.controller.installPlugins[7] string "build-discarder:139.v05696a_7fe240"
jenkins.controller.installPlugins[8] string "dark-theme:262.v0202a_4c8fb_6a"
jenkins.controller.installPlugins[9] string "kubernetes-credentials-provider:1.206.v7ce2cf7b_0c8b"
jenkins.controller.javaOpts string "-XX:+UseContainerSupport -XX:+UseStringDeduplication -Dhudson.model.DirectoryBrowserSupport.CSP=\"sandbox allow-popups; default-src 'none'; img-src 'self' cdn.zero-downtime.net; style-src 'unsafe-inline';\""
jenkins.controller.jenkinsOpts string "--sessionTimeout=180 --sessionEviction=3600"
jenkins.controller.prometheus.enabled bool false
jenkins.controller.resources.limits.cpu string "2000m"
jenkins.controller.resources.limits.memory string "4096Mi"
jenkins.controller.resources.requests.cpu string "250m"
jenkins.controller.resources.requests.memory string "1280Mi"
jenkins.controller.tag string "alpine-jdk17"
jenkins.controller.testEnabled bool false
jenkins.enabled bool false
jenkins.istio.agent.enabled bool false
jenkins.istio.agent.gateway string "istio-ingress/private-ingressgateway"
jenkins.istio.agent.url string "jenkins-agent.example.com"
jenkins.istio.enabled bool false
jenkins.istio.gateway string "istio-ingress/private-ingressgateway"
jenkins.istio.url string "jenkins.example.com"
jenkins.istio.webhook.enabled bool false
jenkins.istio.webhook.gateway string "istio-ingress/ingressgateway"
jenkins.istio.webhook.url string "jenkins-webhook.example.com"
jenkins.persistence.size string "4Gi"
jenkins.rbac.readSecrets bool true
jenkins.serviceAccountAgent.create bool true
jenkins.serviceAccountAgent.name string "jenkins-podman-aws"
trivy.enabled bool false
trivy.image.tag string "0.34.0"
trivy.persistence.enabled bool true
trivy.persistence.size string "1Gi"
trivy.rbac.create bool false